Privacy Policy

Tablen (“Tablen”, “we”, “us”) is a group-messaging application that stores your conversations and files in your own Google Drive. This Privacy Policy explains what information we access, how we use it, and the choices you have. Tablen is operated by Tablen (operated by Nha Dat Co Ltd).

1. Information we access

Google account

When you sign in with Google, we receive your name, email address, and profile picture to identify your account and display it to people you share Tables with.

Google Drive

Tablen requests the https://www.googleapis.com/auth/drive.file scope. This is a per-file scope: Tablen can only access the folders and files it creates itself — the folders, message transcripts (Markdown files), and attachments that make up your Tables and threads. Tablen cannot see or access any other files in your Google Drive. All uploads and edits go through Tablen, so nothing outside your Tablen workspace is ever read, indexed, or used.

Content you provide

The messages you write, files you attach, Table and thread names, and cover images.

2. How we use information

• Provide the service: create, read, and update the Drive files and folders that hold your messages and attachments, and display your conversations.
• Keep you signed in: store a Google refresh token (in encrypted form) so Tablen can access your Drive on your behalf.
• Optional AI features: generate short suggested names and descriptions for your Tables and threads (see §4).

3. Where your data is stored

• Your Google Drive:the substance of your data — message text (as Markdown files) and file attachments — lives in your own Google Drive, or, for organizations, your company’s Google Shared Drive. Tablen keeps only the caches described below.
• Database (Supabase): your account record (id, email, encrypted Google refresh token) and lightweight metadata needed for ordering and structure — Table/thread/message identifiers, timestamps, author display names, membership, and a cached copy of recent message text for fast display.

Our hosting and infrastructure providers (Google, Supabase, and Vercel) process this data on our behalf as service providers.

4. AI processing

If AI suggestions are enabled, a limited amount of content (Table/thread names and recent message text) may be sent to Anthropic’s Claude APIsolely to return a suggested name or short description. Under Anthropic’s API terms, this content is not used to train their models. Suggestions are optional and can be ignored or dismissed.

5. How we share information

We do not sell your personal information. We share it only with:

• Google — to store and retrieve your files via Google Drive and to sign you in.
• Supabase — database hosting.
• Vercel — application hosting.
• Anthropic — optional AI suggestions (see §4).
• Other members you invite to a Table can see the messages and files within that Table.

We may also disclose information if required by law.

6. Limited Use disclosure

Tablen’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Tablen uses Google Drive data only to provide and improve the user-facing features described above; does not transfer or sell this data for advertising or any unrelated purpose; and does not allow humans to read your data except with your consent, for security purposes, or to comply with applicable law.

7. Data retention and deletion

• Your files remain in your own Google Drive under your control. Deleting a Table, thread, or message in Tablen deletes or moves the corresponding files to your Drive Trash.
• You can revoke Tablen’s access at any time at myaccount.google.com/permissions. This stops all future access; your files stay in your Drive.
• To delete your Tablen account and associated metadata, contact us at the email below.

8. Security

Google refresh tokens are stored encrypted, and access is protected by authentication and database row-level security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

Tablen is not directed to children under 13 (or the minimum age required in your jurisdiction) and we do not knowingly collect their data.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will indicate the latest revision by the “Last updated” date at the top of this page.

11. Contact

Tablen (operated by Nha Dat Co Ltd). For privacy questions or data-deletion requests, contact luan@nhadat.company.